The Ownership Opacity Problem: Why Binary Sanctions Screening Misses Multi-Hop Evasion

In January 2026, Greek shipowner Altomare SA found itself on the OFAC Specially Designated Nationals list. The allegation: their vessel KALLISTA (IMO 9295345) had been used to transport Iranian crude. Altomare was eventually delisted after demonstrating they were victims, not conspirators — someone had co-opted their vessel’s identity to mask an illicit cargo movement. But “eventually delisted” glosses over months of frozen banking relationships, suspended P&I cover, and a reputational wound that no delisting notice can fully repair.

The Altomare case is not an outlier. It is a symptom of how the maritime industry screens for sanctions risk — and how that screening systematically fails to catch the actors it should, while occasionally destroying the ones it shouldn’t.

The binary screening trap

Most compliance teams screen vessels the same way: take the vessel name or IMO number, run it against the OFAC SDN list (and perhaps the EU Consolidated or UN Security Council lists), and check for a match. Match found: block the transaction. No match: proceed.

This is binary screening. It answers one question — “Is this specific vessel designated?” — and ignores the far more important one: “Who actually controls this vessel, and are they sanctioned?”

The distinction matters because sanctions evasion in 2026 does not operate at the vessel level. It operates at the ownership level, through layered corporate structures specifically designed to put distance between a designated entity and the vessel it controls.

Consider a realistic structure: a vessel registered to a single-purpose company in the Marshall Islands, owned by a holding entity in Panama, controlled by a parent in the UAE, with ultimate beneficial ownership traceable — if you can trace it at all — to an entity in a sanctioned jurisdiction. No single node in this chain appears on the SDN list. The vessel name is clean. The IMO number returns no hits. Binary screening gives you a green light.

But the beneficial controller is sanctioned.

How ownership chains obscure control

OFAC designated the LPG tanker LUMA (IMO 9034690) in February 2026 for involvement in Iran’s petroleum trade. The vessel flew a Vanuatu flag and was owned by Wansa Gas Shipping Co. Vanuatu, a flag state with no meaningful oversight infrastructure, has become one of several jurisdictions of convenience for operators who need to register vessels quickly and with minimal scrutiny.

This is the pattern: a vessel registered to an entity in a shell company jurisdiction — Marshall Islands, Panama, Liberia, BVI, Cayman Islands, Bermuda. That entity exists solely to hold a single vessel registration. No employees, no office, no public financial statements. It is owned by another entity one jurisdiction removed, which may itself be owned by a third.

Each hop in the chain adds opacity. By the time you reach the third or fourth layer, the connection between the vessel and its true beneficial owner is invisible to any screening system that only checks the vessel itself.

The Global Legal Entity Identifier Foundation (GLEIF) maintains the most comprehensive public database of corporate ownership chains, linking entities to their direct and ultimate parents through standardised LEI records. But here is the problem: the majority of single-purpose vessel-owning entities have no GLEIF record. They were never required to obtain an LEI because they do not participate in financial markets directly. The absence of a record is itself informative — no independent third party has verified the ownership chain.

When a vessel’s registered owner has no LEI, no verifiable parent chain, and is domiciled in a shell company jurisdiction, the ownership opacity is high. That does not mean the vessel is sanctioned. It means you cannot determine whether it is, which — from a compliance standpoint — should amount to the same thing.

The enforcement perimeter is expanding

OFAC’s enforcement posture in 2025 and 2026 has made one thing clear: the agency is no longer content to designate individual vessels and wait for the market to comply. The SDN list grew by over 300 vessels in 2025 alone, a 46% increase that brought the total past 1,800 designated vessels. But the more significant shift is not the volume of designations — it is who OFAC is targeting.

Enforcement actions and guidance now explicitly reach insurers, P&I clubs, brokers, classification societies, and port service providers. The message is unambiguous: if you provide services to a vessel that is beneficially owned or controlled by a sanctioned party, the fact that the vessel name did not appear on your screening report is not a defence.

This changes the compliance calculus entirely. A marine insurer writing hull and machinery cover cannot rely on screening the vessel name against the SDN list at binding. They need to understand who owns the vessel, who owns the owner, and whether any entity in that chain is designated or controlled by a designated party.

A P&I club assessing a new entry needs to evaluate not just the vessel’s condition and loss history, but the transparency of its ownership structure. An opaque ownership chain is not a due diligence inconvenience — it is a sanctions risk the club bears directly if the beneficial owner turns out to be designated.

What compliance teams should do differently

The gap between how the industry screens and how evasion actually works demands a different approach. Three shifts are overdue:

Screen the chain, not just the name. Sanctions screening must extend beyond the vessel to its registered owner, intermediate holding entities, and ultimate beneficial owner. Each entity in the chain should be screened independently against OFAC, EU, and UN lists. An exact IMO match on the vessel is a high-confidence signal, but the absence of a vessel-level match tells you nothing about beneficial ownership risk.

Treat ownership opacity as a risk factor, not a data gap. When a vessel’s registered owner has no LEI, is domiciled in a known shell company jurisdiction, and has no verifiable parent chain, that pattern deserves a risk score — not a shrug. An ownership opacity assessment should be a standard component of vessel vetting, weighted alongside detention history, flag state performance, and vessel age.

Build audit trails that prove what you screened, when, and against which list versions. When OFAC comes calling — and the expanded enforcement perimeter means they increasingly will — “we screened the vessel name” is insufficient. Compliance evidence should include timestamped records of every list checked, the version of each list, the entities screened (not just the vessel), and the outcome. This is not gold-plating; it is the minimum defensible standard for any institution providing services to vessel interests.

The maritime industry has spent decades building sophisticated tools for physical risk — weather, piracy zones, war risk areas, port state control targeting. The same rigour has not been applied to ownership risk. In an enforcement environment where OFAC is designating hundreds of vessels per year and holding service providers accountable for beneficial ownership due diligence, binary screening is not just inadequate. It is a liability.

The Altomare case should be a warning: in a world of multi-hop evasion structures, the vessel name is the least interesting thing about a vessel.